CVE-2019-5300
Summary
| CVE | CVE-2019-5300 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2019-06-04 19:29:00 UTC |
| Updated | 2019-06-05 18:49:00 UTC |
| Description | There is a digital signature verification bypass vulnerability in AR1200, AR1200-S, AR150, AR160, AR200, AR2200, AR2200-S, AR3200, SRG1300, SRG2300 and SRG3300 Huawei routers. The vulnerability is due to the affected software improperly verifying digital signatures for the software image in the affected device. A local attacker with high privilege may exploit the vulnerability to bypass integrity checks for software images and install a malicious software image on the affected device. |
Risk And Classification
Problem Types: CWE-347
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Operating System | Huawei | Ar1200-s Firmware | v200r007c00 | All | All | All |
| Operating System | Huawei | Ar1200-s Firmware | v200r008c20 | All | All | All |
| Operating System | Huawei | Ar1200-s Firmware | v200r008c50 | All | All | All |
| Operating System | Huawei | Ar1200-s Firmware | v200r009c00 | All | All | All |
| Operating System | Huawei | Ar1200-s Firmware | v200r010c00 | All | All | All |
| Operating System | Huawei | Ar1200-s Firmware | v200r007c00 | All | All | All |
| Operating System | Huawei | Ar1200-s Firmware | v200r008c20 | All | All | All |
| Operating System | Huawei | Ar1200-s Firmware | v200r008c50 | All | All | All |
| Operating System | Huawei | Ar1200-s Firmware | v200r009c00 | All | All | All |
| Operating System | Huawei | Ar1200-s Firmware | v200r010c00 | All | All | All |
| Hardware | Huawei | Ar1200e | - | All | All | All |
| Hardware | Huawei | Ar1200e | - | All | All | All |
| Operating System | Huawei | Ar1200 Firmware | v200r007c00 | All | All | All |
| Operating System | Huawei | Ar1200 Firmware | v200r008c20 | All | All | All |
| Operating System | Huawei | Ar1200 Firmware | v200r008c50 | All | All | All |
| Operating System | Huawei | Ar1200 Firmware | v200r009c00 | All | All | All |
| Operating System | Huawei | Ar1200 Firmware | v200r010c00 | All | All | All |
| Operating System | Huawei | Ar1200 Firmware | v200r007c00 | All | All | All |
| Operating System | Huawei | Ar1200 Firmware | v200r008c20 | All | All | All |
| Operating System | Huawei | Ar1200 Firmware | v200r008c50 | All | All | All |
| Operating System | Huawei | Ar1200 Firmware | v200r009c00 | All | All | All |
| Operating System | Huawei | Ar1200 Firmware | v200r010c00 | All | All | All |
| Hardware | Huawei | Ar1220c | - | All | All | All |
| Hardware | Huawei | Ar1220c | - | All | All | All |
| Hardware | Huawei | Ar1220ev | - | All | All | All |
| Hardware | Huawei | Ar1220ev | - | All | All | All |
| Hardware | Huawei | Ar1220evw | - | All | All | All |
| Hardware | Huawei | Ar1220evw | - | All | All | All |
| Hardware | Huawei | Ar1220f-s | - | All | All | All |
| Hardware | Huawei | Ar1220f-s | - | All | All | All |
| Operating System | Huawei | Ar150 Firmware | v200r007c00 | All | All | All |
| Operating System | Huawei | Ar150 Firmware | v200r008c20 | All | All | All |
| Operating System | Huawei | Ar150 Firmware | v200r008c50 | All | All | All |
| Operating System | Huawei | Ar150 Firmware | v200r009c00 | All | All | All |
| Operating System | Huawei | Ar150 Firmware | v200r010c00 | All | All | All |
| Operating System | Huawei | Ar150 Firmware | v200r007c00 | All | All | All |
| Operating System | Huawei | Ar150 Firmware | v200r008c20 | All | All | All |
| Operating System | Huawei | Ar150 Firmware | v200r008c50 | All | All | All |
| Operating System | Huawei | Ar150 Firmware | v200r009c00 | All | All | All |
| Operating System | Huawei | Ar150 Firmware | v200r010c00 | All | All | All |
| Hardware | Huawei | Ar158evw | - | All | All | All |
| Hardware | Huawei | Ar158evw | - | All | All | All |
| Operating System | Huawei | Ar160 Firmware | v200r007c00 | All | All | All |
| Operating System | Huawei | Ar160 Firmware | v200r008c20 | All | All | All |
| Operating System | Huawei | Ar160 Firmware | v200r008c50 | All | All | All |
| Operating System | Huawei | Ar160 Firmware | v200r009c00 | All | All | All |
| Operating System | Huawei | Ar160 Firmware | v200r010c00 | All | All | All |
| Operating System | Huawei | Ar160 Firmware | v200r007c00 | All | All | All |
| Operating System | Huawei | Ar160 Firmware | v200r008c20 | All | All | All |
| Operating System | Huawei | Ar160 Firmware | v200r008c50 | All | All | All |
| Operating System | Huawei | Ar160 Firmware | v200r009c00 | All | All | All |
| Operating System | Huawei | Ar160 Firmware | v200r010c00 | All | All | All |
| Hardware | Huawei | Ar161 | - | All | All | All |
| Hardware | Huawei | Ar161 | - | All | All | All |
| Hardware | Huawei | Ar161ew | - | All | All | All |
| Hardware | Huawei | Ar161ew | - | All | All | All |
| Hardware | Huawei | Ar161f | - | All | All | All |
| Hardware | Huawei | Ar161f | - | All | All | All |
| Hardware | Huawei | Ar161f-dgp | - | All | All | All |
| Hardware | Huawei | Ar161f-dgp | - | All | All | All |
| Hardware | Huawei | Ar161fg-l | - | All | All | All |
| Hardware | Huawei | Ar161fg-l | - | All | All | All |
| Hardware | Huawei | Ar161fgw-l | - | All | All | All |
| Hardware | Huawei | Ar161fgw-l | - | All | All | All |
| Hardware | Huawei | Ar161fv-1p | - | All | All | All |
| Hardware | Huawei | Ar161fv-1p | - | All | All | All |
| Hardware | Huawei | Ar161fw | - | All | All | All |
| Hardware | Huawei | Ar161fw | - | All | All | All |
| Hardware | Huawei | Ar161g-l | - | All | All | All |
| Hardware | Huawei | Ar161g-l | - | All | All | All |
| Hardware | Huawei | Ar161w | - | All | All | All |
| Hardware | Huawei | Ar161w | - | All | All | All |
| Hardware | Huawei | Ar168f | - | All | All | All |
| Hardware | Huawei | Ar168f | - | All | All | All |
| Hardware | Huawei | Ar168f-4p | - | All | All | All |
| Hardware | Huawei | Ar168f-4p | - | All | All | All |
| Hardware | Huawei | Ar169 | - | All | All | All |
| Hardware | Huawei | Ar169 | - | All | All | All |
| Hardware | Huawei | Ar169egw-l | - | All | All | All |
| Hardware | Huawei | Ar169egw-l | - | All | All | All |
| Hardware | Huawei | Ar169ew | - | All | All | All |
| Hardware | Huawei | Ar169ew | - | All | All | All |
| Hardware | Huawei | Ar169f | - | All | All | All |
| Hardware | Huawei | Ar169f | - | All | All | All |
| Hardware | Huawei | Ar169fgw-l | - | All | All | All |
| Hardware | Huawei | Ar169fgw-l | - | All | All | All |
| Hardware | Huawei | Ar169fvw | - | All | All | All |
| Hardware | Huawei | Ar169fvw | - | All | All | All |
| Hardware | Huawei | Ar169fvw-8s | - | All | All | All |
| Hardware | Huawei | Ar169fvw-8s | - | All | All | All |
| Hardware | Huawei | Ar169g-l | - | All | All | All |
| Hardware | Huawei | Ar169g-l | - | All | All | All |
| Hardware | Huawei | Ar169jfvw-2s | - | All | All | All |
| Hardware | Huawei | Ar169jfvw-2s | - | All | All | All |
| Hardware | Huawei | Ar169w | - | All | All | All |
| Hardware | Huawei | Ar169w | - | All | All | All |
| Operating System | Huawei | Ar200 Firmware | v200r007c00 | All | All | All |
| Operating System | Huawei | Ar200 Firmware | v200r008c20 | All | All | All |
| Operating System | Huawei | Ar200 Firmware | v200r008c50 | All | All | All |
| Operating System | Huawei | Ar200 Firmware | v200r009c00 | All | All | All |
| Operating System | Huawei | Ar200 Firmware | v200r010c00 | All | All | All |
| Operating System | Huawei | Ar200 Firmware | v200r007c00 | All | All | All |
| Operating System | Huawei | Ar200 Firmware | v200r008c20 | All | All | All |
| Operating System | Huawei | Ar200 Firmware | v200r008c50 | All | All | All |
| Operating System | Huawei | Ar200 Firmware | v200r009c00 | All | All | All |
| Operating System | Huawei | Ar200 Firmware | v200r010c00 | All | All | All |
| Hardware | Huawei | Ar201 | - | All | All | All |
| Hardware | Huawei | Ar201 | - | All | All | All |
| Hardware | Huawei | Ar2200s | - | All | All | All |
| Hardware | Huawei | Ar2200s | - | All | All | All |
| Operating System | Huawei | Ar2200s Firmware | v200r007c00 | All | All | All |
| Operating System | Huawei | Ar2200s Firmware | v200r008c20 | All | All | All |
| Operating System | Huawei | Ar2200s Firmware | v200r008c50 | All | All | All |
| Operating System | Huawei | Ar2200s Firmware | v200r009c00 | All | All | All |
| Operating System | Huawei | Ar2200s Firmware | v200r010c00 | All | All | All |
| Operating System | Huawei | Ar2200s Firmware | v200r007c00 | All | All | All |
| Operating System | Huawei | Ar2200s Firmware | v200r008c20 | All | All | All |
| Operating System | Huawei | Ar2200s Firmware | v200r008c50 | All | All | All |
| Operating System | Huawei | Ar2200s Firmware | v200r009c00 | All | All | All |
| Operating System | Huawei | Ar2200s Firmware | v200r010c00 | All | All | All |
| Operating System | Huawei | Ar2200 Firmware | v200r007c00 | All | All | All |
| Operating System | Huawei | Ar2200 Firmware | v200r008c20 | All | All | All |
| Operating System | Huawei | Ar2200 Firmware | v200r008c50 | All | All | All |
| Operating System | Huawei | Ar2200 Firmware | v200r009c00 | All | All | All |
| Operating System | Huawei | Ar2200 Firmware | v200r010c00 | All | All | All |
| Operating System | Huawei | Ar2200 Firmware | v200r007c00 | All | All | All |
| Operating System | Huawei | Ar2200 Firmware | v200r008c20 | All | All | All |
| Operating System | Huawei | Ar2200 Firmware | v200r008c50 | All | All | All |
| Operating System | Huawei | Ar2200 Firmware | v200r009c00 | All | All | All |
| Operating System | Huawei | Ar2200 Firmware | v200r010c00 | All | All | All |
| Hardware | Huawei | Ar2204-27ge | - | All | All | All |
| Hardware | Huawei | Ar2204-27ge | - | All | All | All |
| Hardware | Huawei | Ar2204-27ge-p | - | All | All | All |
| Hardware | Huawei | Ar2204-27ge-p | - | All | All | All |
| Hardware | Huawei | Ar2204-51ge-p | - | All | All | All |
| Hardware | Huawei | Ar2204-51ge-p | - | All | All | All |
| Hardware | Huawei | Ar2204e | - | All | All | All |
| Hardware | Huawei | Ar2204e | - | All | All | All |
| Hardware | Huawei | Ar2204xe | - | All | All | All |
| Hardware | Huawei | Ar2204xe | - | All | All | All |
| Hardware | Huawei | Ar2220e | - | All | All | All |
| Hardware | Huawei | Ar2220e | - | All | All | All |
| Hardware | Huawei | Ar2240 | - | All | All | All |
| Hardware | Huawei | Ar2240 | - | All | All | All |
| Hardware | Huawei | Ar2240c | - | All | All | All |
| Hardware | Huawei | Ar2240c | - | All | All | All |
| Operating System | Huawei | Ar3200 Firmware | v200r007c00 | All | All | All |
| Operating System | Huawei | Ar3200 Firmware | v200r008c20 | All | All | All |
| Operating System | Huawei | Ar3200 Firmware | v200r008c50 | All | All | All |
| Operating System | Huawei | Ar3200 Firmware | v200r009c00 | All | All | All |
| Operating System | Huawei | Ar3200 Firmware | v200r010c00 | All | All | All |
| Operating System | Huawei | Ar3200 Firmware | v200r007c00 | All | All | All |
| Operating System | Huawei | Ar3200 Firmware | v200r008c20 | All | All | All |
| Operating System | Huawei | Ar3200 Firmware | v200r008c50 | All | All | All |
| Operating System | Huawei | Ar3200 Firmware | v200r009c00 | All | All | All |
| Operating System | Huawei | Ar3200 Firmware | v200r010c00 | All | All | All |
| Hardware | Huawei | Ar3260 | - | All | All | All |
| Hardware | Huawei | Ar3260 | - | All | All | All |
| Operating System | Huawei | Srg1300 Firmware | v200r007c00 | All | All | All |
| Operating System | Huawei | Srg1300 Firmware | v200r008c50 | All | All | All |
| Operating System | Huawei | Srg1300 Firmware | v200r009c00 | All | All | All |
| Operating System | Huawei | Srg1300 Firmware | v200r010c00 | All | All | All |
| Operating System | Huawei | Srg1300 Firmware | v200r007c00 | All | All | All |
| Operating System | Huawei | Srg1300 Firmware | v200r008c50 | All | All | All |
| Operating System | Huawei | Srg1300 Firmware | v200r009c00 | All | All | All |
| Operating System | Huawei | Srg1300 Firmware | v200r010c00 | All | All | All |
| Hardware | Huawei | Srg1320vw | - | All | All | All |
| Hardware | Huawei | Srg1320vw | - | All | All | All |
| Operating System | Huawei | Srg2300 Firmware | v200r007c00 | All | All | All |
| Operating System | Huawei | Srg2300 Firmware | v200r008c50 | All | All | All |
| Operating System | Huawei | Srg2300 Firmware | v200r009c00 | All | All | All |
| Operating System | Huawei | Srg2300 Firmware | v200r010c00 | All | All | All |
| Operating System | Huawei | Srg2300 Firmware | v200r007c00 | All | All | All |
| Operating System | Huawei | Srg2300 Firmware | v200r008c50 | All | All | All |
| Operating System | Huawei | Srg2300 Firmware | v200r009c00 | All | All | All |
| Operating System | Huawei | Srg2300 Firmware | v200r010c00 | All | All | All |
| Hardware | Huawei | Srg2320e | - | All | All | All |
| Hardware | Huawei | Srg2320e | - | All | All | All |
| Operating System | Huawei | Srg3300 Firmware | v200r007c00 | All | All | All |
| Operating System | Huawei | Srg3300 Firmware | v200r008c50 | All | All | All |
| Operating System | Huawei | Srg3300 Firmware | v200r009c00 | All | All | All |
| Operating System | Huawei | Srg3300 Firmware | v200r010c00 | All | All | All |
| Operating System | Huawei | Srg3300 Firmware | v200r007c00 | All | All | All |
| Operating System | Huawei | Srg3300 Firmware | v200r008c50 | All | All | All |
| Operating System | Huawei | Srg3300 Firmware | v200r009c00 | All | All | All |
| Operating System | Huawei | Srg3300 Firmware | v200r010c00 | All | All | All |
| Hardware | Huawei | Srg3340 | - | All | All | All |
| Hardware | Huawei | Srg3340 | - | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| Security Advisory - Digital Signature Verification Bypass Vulnerability in Some Huawei Routers | CONFIRM | www.huawei.com | Vendor Advisory |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
Legacy QID Mappings
- 43859 Huawei Router Digital Signature Verification Bypass Vulnerability (Huawei-SA-20190320-01-ar-en)